Candidate Data Security
Last updated: August 2026
Passport creates a verified profile employers can trust and act on instantly. Candidate data is protected at every stage — collection, verification, transmission, storage, deletion — through Identomat’s certified verification layer plus CleoHR’s own controls.
How candidate data is handled
Encryption end to end
ID documents, biometric data and personal details are encrypted in transit (TLS) and at rest.
Data minimization
Only data required for verification and hiring is collected. Nothing extra is gathered or retained.
Access control
Role-based access. Employers see only the verified result, not raw documents.
Retention and deletion
Data is kept only as long as needed, then securely deleted.
Lawful processing
Data-subject rights — access, correction, deletion — respected under GDPR.
Audit trail
Every verification is logged for traceability and regulatory review.
ID and liveness verification, powered by Identomat
Identity and liveness checks run through Identomat, independently certified to:
| Certification | Covers |
|---|---|
| SOC 2 Type II | Security, availability and confidentiality controls, audited over time |
| ISO 30107-3 (Level 2) | Biometric presentation-attack detection (anti-spoofing) |
| iBeta Level 2 | Third-party tested liveness detection |
| CCPA | California consumer privacy compliance |
| eIDAS | EU electronic identification and trust services compliance |
Liveness and anti-spoofing checks (ISO 30107-3 Level 2, iBeta Level 2) confirm a real, present human and block fake IDs, spoofed faces and injected media.
Bottom line
Candidate data is handled to enterprise, banking-grade standards — ID and liveness verification through Identomat’s independently certified platform, backed by CleoHR’s own encryption, access, retention and processing controls, from first scan to employer share.
Certification details reflect Identomat’s current published standards and are subject to change. Current status is available on request for due diligence.
Questions
Doing a security review, or need current certification status? Reach us at privacy@getpassport.ai.
See also our Privacy Policy and Terms of Service.